L
Vendor security profile
libarchive
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs13
Critical1
CISA KEV0
Public exploit2
Patch rate%85
Avg. CVSS5.9
12-month vulnerability rate
0
0
0
0
3
1
0
0
0
0
1
0
CVE KEV
CVE severity distribution
13toplam CVE
Critical1 (8%)
High3 (23%)
Medium5 (38%)
Low4 (31%)
Patch and exploitation view
%85
Verified patch
%0
CISA KEV
%15
Public exploit
11Patch available
0Partial
0Workaround
0Vendor: no patch
2Unknown
Latest vulnerabilities
2.5
CVE-2025-64031
Vulnerability in Libarchive
L
Patch status unknownEPSS %0
5.5
CVE-2026-5745
Libarchive: a null pointer dereference vulnerability exists in the acl parser of libarchive
RH
Patch status unknownEPSS %0
7.5
CVE-2026-5121
Libarchive: libarchive: arbitrary code execution via integer overflow in iso9660 image processing
RH
Patch verifiedEPSS %1
6.5
CVE-2026-4426
Libarchive: libarchive: denial of service via malformed iso file processing
RH
Patch verifiedEPSS %1
7.5
CVE-2026-4424
Libarchive: libarchive: information disclosure via heap out-of-bounds read in rar archive processing
RH
Patch verifiedEPSS %1
7.8
CVE-2025-5914
Libarchive: double free at archive_read_format_rar_seek_data() in archive_read_support_format_rar.c
R
Patch verifiedEPSS %0
3.9
CVE-2025-5918
Libarchive: reading past eof may be triggered for piped file streams
R
Patch verifiedEPSS %0
2.8
CVE-2025-5917
Libarchive: off by one error in build_ustar_entry_name() at archive_write_set_format_pax.c
R
Patch verifiedEPSS %0
3.9
CVE-2025-5916
Libarchive: integer overflow while reading warc files at archive_read_support_format_warc.c
R
Patch verifiedEPSS %0
6.6
CVE-2025-5915
Libarchive: heap buffer over read in copy_from_lzss_window() at archive_read_support_format_rar.c
R
Patch verifiedEPSS %0